Multi-factor authentication in Azure - Interactive Code Practice

Practice - 5 Tasks

1fill in blank

easy

Complete the code to enable multi-factor authentication (MFA) for a user in Azure AD.

Azure

az ad user update --id [e-mail] --[1]

Drag options to blanks, or click blank then click option'

Amfa

Benable-mfa

Cforce-change-password-next-login

Dforce-mfa

Attempts:

3 left

💡 Hint

Common Mistakes

Using 'enable-mfa' which is not a valid Azure CLI option.

Confusing password reset options with MFA enforcement.

The force-mfa option is used to require the user to register for multi-factor authentication in Azure AD.

2fill in blank

medium

Complete the code to create a Conditional Access policy that requires MFA for all users.

Azure

az ad conditional-access policy create --display-name "Require MFA" --state enabled --conditions users [1] --grant-controls operator RequireMultiFactorAuth

Drag options to blanks, or click blank then click option'

Ainclude

Bexclude

Call-users

Dnone

Attempts:

3 left

💡 Hint

Common Mistakes

Using 'exclude' which would exclude users from the policy.

Using 'none' which applies to no users.

The include keyword specifies which users the policy applies to, here meaning all included users.

3fill in blank

hard

Fix the error in the command to enable MFA registration enforcement for all users.

Azure

az ad mfa [1] --all-users

Drag options to blanks, or click blank then click option'

Aenforce

Bregister

Cenable

Drequire

Attempts:

3 left

💡 Hint

Common Mistakes

Using 'enable' which is not a valid subcommand here.

Using 'register' which is not a recognized command.

The correct command uses enforce to require MFA registration for all users.

4fill in blank

hard

Fill both blanks to configure a Conditional Access policy that targets users and requires MFA.

Azure

az ad conditional-access policy create --display-name "MFA Policy" --state enabled --conditions users [1] --grant-controls operator [2]

Drag options to blanks, or click blank then click option'

Ainclude

BRequireMultiFactorAuth

Cexclude

DRequirePasswordChange

Attempts:

3 left

💡 Hint

Common Mistakes

Using 'exclude' which would skip users.

Using 'RequirePasswordChange' which is unrelated to MFA.

The policy must include users and require MFA using RequireMultiFactorAuth grant control.

5fill in blank

hard

Fill all three blanks to create a policy that includes all users, excludes guests, and requires MFA.

Azure

az ad conditional-access policy create --display-name "Secure Access" --state enabled --conditions users [1] --exclude-users [2] --grant-controls operator [3]

Drag options to blanks, or click blank then click option'

Ainclude

Bguests

CRequireMultiFactorAuth

Dall-users

Attempts:

3 left

💡 Hint

Common Mistakes

Confusing 'all-users' with 'include' in the first blank.

Using 'RequirePasswordChange' instead of MFA enforcement.

The policy includes users, excludes guests, and requires MFA with RequireMultiFactorAuth.